From the course: CompTIA Security+ (SY0-601) Cert Prep: 10 Governance, Risk, and Compliance

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Categorizing security controls

Categorizing security controls

From the course: CompTIA Security+ (SY0-601) Cert Prep: 10 Governance, Risk, and Compliance

Start my 1-month free trial

Categorizing security controls

- [Instructor] Security professionals spend the majority of our time designing, implementing, and managing security controls as countermeasures to the risks that we identify during risk assessments. The security controls are the procedures and mechanisms that an organization puts in place to address security risks in some manner. These might include trying to reduce the likelihood of a risk materializing, trying to minimize the impact of a risk if it does occur, or putting controls in place to detect security issues that happen. Now, it's important to remember that security controls are designed to keep our risk profile in line with our risk appetite. Before we move into the area of cybersecurity, let's think for a moment about the way that you secure your home. You probably use a variety of different security controls. You certainly have locks on your doors and windows designed to keep out intruders, minimizing the…

Contents